Data protection issues have not been prioritised in the real estate and construction sector, but the EU's data protection regulation GDPR will introduce new obligations for dealing with them. This project will create an electronic channel and a standard operating practice for complying with the regulation in the real estate and construction sector.

What kind of problem was the project trying to solve?

The EU's General Data Protection Regulation GDPR will enter into effect on 25 May 2018 and from this date, the new regulations will have to be complied with in the processing of personal data. The regulation applies to all organisations and companies that process EU citizens' personal data or personal data within the EU.

The GDPR therefore introduces new obligations to the processing of personal data also in the real estate and construction sector and enhances data protection with significant administrative sanctions and regulations on the division of responsibilities.

Data protection issues have not been prioritised in the real estate and construction sector before and previously, investing in them has mainly been possible for the largest operators only. Regardless of this, a large amount of personal data is processed in the sector.

If the operators in the real estate and construction sector do not understand or take into consideration the requirements of the GDPR, the digitalisation of the sector and adopting new operating methods may be hindered or delayed. This is because, for example, the different parties in the network of the real estate and construction sector do not necessarily trust each other's capability to act in compliance with the current law.  

Objective: to standardise a GDPR operating model for the real estate and construction sector

In the first stage of the experimental project, the functioning of the GDPR tool is tested in the real estate and construction sector, the special features of the sector are identified and document models are produced to meet special needs.

Furthermore, practical solutions such as a standard operating method and an electronic channel for the data subjects to inspect their data by using the MyData service will be produced. MyData is a principle in the management and processing of personal data, according to which people must have the opportunity to manage and use the personal data collected on them by different states (e.g. identification data, health data or mobility data).

In the second stage, the project will be introduced in a larger group of companies from the real estate and construction sector. External trainers will also be used to provide support to the project as necessary.

In the last stage, the operating model will be extended to all SMEs in the real estate and construction sector and they will be supported with an educational programme and company-specific trainers.

Who benefits?

Companies in the real estate and construction sector and people who work in those companies.